EtreCheck version: 5.6.5 (5229)
Report generated: 2021-01-10 17:57:54
Download EtreCheck from https://etrecheck.com
Runtime: 1:59
Performance: Excellent
Sandbox: Enabled
Full drive access: Enabled

Problem: Other problem
Description: 
Beim Update von Firefox auf version 84 (unter Catalina 10.15.7) mit ei
nigen göffneten Tabs erschien beim Neustart ein Pop-Up mit dem Hinweis
, dass einige Dateien verdächtigt seinen, Ransomware zu erhalten. Ich 
habe einen "Quarantäne"-Button gedrückt, woraufhin sich Firefox verabs
chiedet hat und ich beim Startversuch immer die obige Meldung erhalte.
Auf Seiten von Firefox habe ich mehrere Aktionen wie Deinstallation / 
Neuinstallation, Profil reparieren o.ä. vergeblich versucht. Auà erdem 
läuft Firefox, wenn er über den Umweg Profilmanager gestartet wird ohn
e Probleme.
In den Systemeinstellungen Sicherheit wird Firefox nicht als blockiert
 aufgeführt. Es sieht für mich so aus, als sei er auf einer anderen "s
chwarzen Liste" von Catalina gelandet, die ich bisher nicht gefunden h
abe.

Major Issues: None

Minor Issues:
  These issues do not need immediate attention but they may indicate future problems or opportunities for improvement. 
  Apps crashing - There have been numerous app crashes.
  Apps with heavy CPU usage - There have been numerous cases of apps with heavy CPU usage.
  Clean up - There are orphan files that could be removed.
  Unsigned files - There are unsigned software files installed. Apple has said that unsigned software will not run by default in a future version of the operating system.
  System modifications - There are a large number of system modifications running in the background.
  32-bit Apps - This computer has 32-bits apps will not work on current versions of the operating system.
  Kernel extensions present - This computer has kernel extensions that may not work in the future.
  Sharing enabled - This computer has sharing services enabled that could be a security risk.

Hardware Information:
  MacBook Pro (16-inch, 2019)
  MacBook Pro Model: MacBookPro16,1
  2,3 GHz 8-Core Intel Core i9 (i9-9880H) CPU: 8-core
  16 RAM - Not upgradeable
    BANK 0/ChannelA-DIMM0 - 8 GB DDR4 2667  
    BANK 2/ChannelB-DIMM0 - 8 GB DDR4 2667  
  Battery: Health = Normal - Cycle count = 20

Video Information:
  Intel UHD Graphics 630 - VRAM: 1536 MB
  AMD Radeon Pro 5500M - VRAM: 4 GB
    Color LCD (built-in) 3584 x 2240
    DELL 2709W 1920 x 1200

Drives:
  disk0 - APPLE SSD AP1024N 1.00 TB (Solid State - TRIM: Yes) 
  Internal PCI-Express 8.0 GT/s x4 NVM Express
    disk0s1 - EFI [EFI] 315 MB
    disk0s2 [APFS Container] 1.00 TB
      disk1 [APFS Virtual drive] 1.00 TB (Shared by 5 volumes)
        disk1s1 - Macintosh HD (APFS) (Shared - 11.20 GB used)
        disk1s2 - Macintosh HD - Data (APFS) [APFS Virtual drive] (Shared - 847.37 GB used)
        disk1s3 - Preboot (APFS) [APFS Preboot] (Shared)
        disk1s4 - Recovery (APFS) [Recovery] (Shared)
        disk1s5 - VM (APFS) [APFS VM] (Shared - 1.07 GB used)

Mounted Volumes:
  disk1s1 - Macintosh HD
    1.00 TB (Shared - 11.20 GB used, 144.42 GB available, 139.78 GB free)
    APFS
    Mount point: /
    Encrypted
    Read-only: Yes

  disk1s2 - Macintosh HD - Data [APFS Virtual drive]
    1.00 TB (Shared - 847.37 GB used, 144.42 GB available, 139.78 GB free)
    APFS
    Mount point: /System/Volumes/Data
    Encrypted

  disk1s5 - VM [APFS VM]
    1.00 TB (Shared - 1.07 GB used, 139.78 GB free)
    APFS
    Mount point: /private/var/vm
    Encrypted

Network:
  Interface en5: USB 10/100/1000 LAN
  Interface bridge0: Thunderbolt Bridge
  Interface en0: Wi-Fi
    802.11 a/b/g/n/ac
  Interface en7: Bluetooth PAN

  File sharing: Enabled
  Screen sharing: Enabled

System Software:
  macOS Catalina 10.15.7 (19H114) 
  Time since boot: About 6 hours

Configuration Files:
  /etc/hosts - Count: 1

Notifications:
  EtreCheck.app
    one notification

Security:
  Gatekeeper: Enabled
  System Integrity Protection: Enabled

  Antivirus software: Apple

  File sharing: Enabled
  Screen sharing: Enabled

Unsigned Files:
  Launchd: /Library/LaunchDaemons/jp.co.canon.MasterInstaller.plist
    Executable: /Library/PrivilegedHelperTools/jp.co.canon.MasterInstaller
    Details: Exact match found in the legitimate list - probably OK

  Launchd: /Library/LaunchAgents/com.sandisk.cruzeragent.plist
    Executable: /Library/Application Support/Sandisk/Cruzer/SDAgent
    Details: Exact match found in the legitimate list - probably OK

  Login Item: /Applications/Adobe Elements 12 Organizer.app/Contents/ElementsAutoAnalyzer.app

  Plugin: /Library/Internet Plug-Ins/OfficeLiveBrowserPlugin.plugin
  Plugin: /Library/Internet Plug-Ins/Flip4Mac WMV Plugin.plugin
  Plugin: /Library/Internet Plug-Ins/VLC Plugin.plugin
  Plugin: /Library/Internet Plug-Ins/Silverlight.plugin
  Plugin: /Library/Internet Plug-Ins/WacomTabletPlugin.plugin
  Plugin: /Library/Internet Plug-Ins/SharePointBrowserPlugin.plugin
  Plugin: /Library/Internet Plug-Ins/CANONiMAGEGATEWAYDL.plugin
  Plugin: /Library/Internet Plug-Ins/EPPEX Plugin.plugin
  Plugin: /Library/Internet Plug-Ins/DirectorShockwave.plugin
  Plugin: ~/Library/Internet Plug-Ins/WebEx64.plugin

  Preference Pane: /Library/PreferencePanes/Flip4Mac WMV.prefPane
  Preference Pane: /Library/PreferencePanes/Perian.prefPane

  Apps: 146

32-bit Applications:
  94 32-bit apps

Kernel Extensions:
  /Applications/Acronis True Image.app
    fileprotector.kext (2.4.4 - SDK 10.14)

  /Applications/Parallels Desktop.app
    prl_hypervisor.kext (15.1.5 47309 - SDK 10.9)
    prl_netbridge.kext (15.1.5 47309 - SDK 10.9)
    prl_usb_connect.kext (15.1.5 47309 - SDK 10.9)
    prl_vnic.kext (15.1.5 47309 - SDK 10.9)

  /Applications/Toast 11 Titanium/Spin Doctor.app
    Terminus.kext (4)

  /Applications/Toast 11 Titanium/Toast Titanium.app
    RoxioBluRaySupport.kext (1.1.6)

  /Library/Extensions
    OlympusDSCDriver.kext (2.0.0)
    OlympusDSCSCSIDriver.kext (2.0.0)
    ufsd_NTFS.kext (15.5.106 - SDK 10.10)
    LegacyUSBInjector.kext (1.0)
    LegacyUSBVideoSupport.kext (1.0)
    NDRVShim.kext (1.0 - SDK 10.13)
    SIPManager.kext (1.0 - SDK 10.12)
    Cruzer MAC Extension.kext (1.0)
    FTDIKext.kext (1.0 - SDK 10.10)
    Wacom Tablet.kext (Wacom Tablet 6.3.11-3 - SDK 10.10)

  ~/Library/Application Support/Boxcryptor/Boxcryptor 902/Boxcryptor.app
    bcfs.kext (3.7.1 - SDK 10.5)

  ~/Library/Services/ToastIt.service/Contents/MacOS
    TDIXController.kext (2.0)

System Launch Agents:
  [Not Loaded]  17 Apple tasks
  [Loaded]  167 Apple tasks
  [Running]  129 Apple tasks

System Launch Daemons:
  [Not Loaded]  30 Apple tasks
  [Loaded]  177 Apple tasks
  [Running]  129 Apple tasks
  [Other]  One Apple task

Launch Agents:
  [Running] com.acronis.monitor.plist (Acronis International GmbH - installed 2020-06-14)
  [Not Loaded] com.adobe.AAM.Updater-1.0.plist (Adobe Systems, Inc. - installed 2020-02-26)
  [Other] com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a23d420d.plist (Adobe Systems, Inc. - installed 2020-11-06)
  [Running] com.adobe.AdobeCreativeCloud.plist (Adobe Inc. - installed 2020-10-08)
  [Running] com.adobe.GC.AGM.plist (Adobe Systems, Inc. - installed 2020-07-10)
  [Not Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2020-07-10)
  [Loaded] com.adobe.ccxprocess.plist (Apple - installed 2020-10-30)
  [Loaded] com.google.keystone.agent.plist (Google, Inc. - installed 2020-10-20)
  [Loaded] com.google.keystone.xpcservice.plist (Google, Inc. - installed 2020-10-20)
  [Loaded] com.microsoft.OneDriveStandaloneUpdater.plist (Microsoft Corporation - installed 2020-10-08)
  [Loaded] com.microsoft.update.agent.plist (Microsoft Corporation - installed 2020-12-15)
  [Running] com.paragon-software.ntfs.notification-agent.plist (Paragon Software GmbH - installed 2020-03-17)
  [Other] com.paragon.updater.plist (Paragon Software GmbH - installed 2015-03-18)
  [Other] com.sandisk.cruzeragent.plist (? 673040ef  - installed 2009-12-09)
  [Running] com.wacom.wacomtablet.plist (Wacom Technology Corp. - installed 2014-12-22)
  [Loaded] de.devolo.networkservice.notify.plist (devolo AG - installed 2020-09-04)

Launch Daemons:
  [Loaded] com.acronis.acep.plist (Acronis International GmbH - installed 2020-06-14)
  [Running] com.acronis.active_protection.plist (Acronis International GmbH - installed 2020-06-14)
  [Running] com.acronis.mms_mini.plist (Acronis International GmbH - installed 2020-06-14)
  [Running] com.acronis.mobile_backup_server.plist (Acronis International GmbH - installed 2020-06-14)
  [Running] com.acronis.mobile_backup_status_server.plist (Acronis International GmbH - installed 2020-06-14)
  [Running] com.acronis.scheduler.plist (Acronis International GmbH - installed 2020-06-14)
  [Running] com.acronis.trueimagehelper.plist (Acronis International GmbH - installed 2020-06-14)
  [Loaded] com.adobe.ARMDC.Communicator.plist (Adobe Systems, Inc. - installed 2020-09-25)
  [Loaded] com.adobe.ARMDC.SMJobBlessHelper.plist (Adobe Systems, Inc. - installed 2020-09-25)
  [Running] com.adobe.acc.installer.v2.plist (Adobe Inc. - installed 2020-10-08)
  [Loaded] com.adobe.agsservice.plist (Adobe Systems, Inc. - installed 2020-07-10)
  [Loaded] com.apple.installer.osmessagetracing.plist (Apple - installed 2020-05-28)
  [Running] com.apple.serverd.plist (App Store - installed 2020-03-30)
  [Loaded] com.bombich.ccchelper.plist (Bombich Software, Inc. - installed 2019-01-02)
  [Loaded] com.boxcryptor.BCFS.KextLoaderHelper.plist (Benjamin Fleischer - installed 2016-02-14)
  [Loaded] com.boxcryptor.BCFS.Mounter.Helper.plist (Secomba GmbH - installed 2020-11-06)
  [Running] com.boxcryptor.osx.PrivilegedHelper.plist (Secomba GmbH - installed 2020-11-06)
  [Loaded] com.google.keystone.daemon.plist (Google, Inc. - installed 2020-10-20)
  [Loaded] com.microsoft.OneDriveStandaloneUpdaterDaemon.plist (Microsoft Corporation - installed 2020-10-08)
  [Loaded] com.microsoft.OneDriveUpdaterDaemon.plist (Microsoft Corporation - installed 2020-10-08)
  [Loaded] com.microsoft.autoupdate.helper.plist (Microsoft Corporation - installed 2020-12-15)
  [Loaded] com.microsoft.office.licensingV2.helper.plist (Microsoft Corporation - installed 2018-08-04)
  [Not Loaded] com.oracle.java.Helper-Tool.plist (? 0  - installed )
  [Running] com.paragon-software.installer.plist (Paragon Software GmbH - installed 2019-12-23)
  [Loaded] com.paragon-software.ntfs.loader.plist (Apple - installed 2020-12-09)
  [Running] com.paragon-software.ntfsd.plist (Paragon Software GmbH - installed 2020-03-17)
  [Running] de.devolo.networkservice.plist (devolo AG - installed 2020-09-04)
  [Loaded] jp.co.canon.MasterInstaller.plist (? d0637166  - installed 2020-05-14)

User Launch Agents:
  [Loaded] com.adobe.AAM.Updater-1.0.plist (Adobe Systems, Inc. - installed 2020-02-26)
  [Other] com.adobe.ARM.***.plist (? 0  - installed 2013-05-11)
  [Loaded] com.adobe.GC.Invoker-1.0.plist (Adobe Systems, Inc. - installed 2020-07-10)
  [Loaded] com.dropbox.DropboxMacUpdate.agent.plist (Dropbox, Inc. - installed 2020-11-14)

User Login Items:
  [Running] 2BUA8C4S2C.com.agilebits.onepassword4-helper (AgileBits Inc. - installed 2018-05-20)
    Modern Login Item
    /Applications/1Password 6.app/Contents/Library/LoginItems/2BUA8C4S2C.com.agilebits.onepassword4-helper.app

  [Loaded] ElementsAutoAnalyzer (? - installed 2017-07-03)
    Application
    /Applications/Adobe Elements 12 Organizer.app/Contents/ElementsAutoAnalyzer.app

  [Not Loaded] AppCleaner SmartDelete (Julien Ramseier - installed 2020-10-22)
    Modern Login Item
    /Applications/AppCleaner.app/Contents/Library/LoginItems/AppCleaner SmartDelete.app

  [Not Loaded] AusweisApp2AutostartHelper (Governikus GmbH & Co. KG - installed 2018-12-21)
    Modern Login Item
    /Applications/AusweisApp2.app/Contents/Library/LoginItems/AusweisApp2AutostartHelper.app

  [Running] Boxcryptor (Secomba GmbH - installed 2020-12-14)
    Application
    /Applications/Boxcryptor.app

  [Not Loaded] CIJSULAgent (Canon Inc. - installed 2020-05-14)
    Modern Login Item
    /Applications/Canon Utilities/IJ Scan Utility/Canon IJ Scan Utility Lite.app/Contents/Library/LoginItems/CIJSULAgent.app

  [Not Loaded] CanonIJExtendedSurveyLaunchAgent (Canon Inc. - installed 2020-05-14)
    Modern Login Item
    /Applications/Canon Utilities/Inkjet Extended Survey Program/Inkjet Extended Survey Program.app/Contents/MacOS/ESPController.app/Contents/Library/LoginItems/CanonIJExtendedSurveyLaunchAgent.app

  [Not Loaded] CCC User Agent (Bombich Software, Inc. - installed 2019-01-02)
    Modern Login Item
    /Applications/Carbon Copy Cloner.app/Contents/Library/LoginItems/CCC User Agent.app

  [Running] Dropbox (Dropbox, Inc. - installed 2020-12-18)
    Application
    /Applications/Dropbox.app

  [Not Loaded] MagentaCLOUDLaunchHelperApp (App Store - installed 2018-05-24)
    Modern Login Item
    /Applications/MagentaCLOUD.app/Contents/Library/LoginItems/MagentaCLOUDLaunchHelperApp.app

  [Not Loaded] FSMenuAppLoginItemHelper (Paragon Software GmbH - installed 2020-04-11)
    Modern Login Item
    /Applications/NTFS for Mac.app/Contents/Library/LoginItems/FSMenuAppLoginItemHelper.app

  [Not Loaded] NasNaviHelper (App Store - installed 2020-07-27)
    Modern Login Item
    /Applications/NasNavigator2.app/Contents/Library/LoginItems/NasNaviHelper.app

  [Not Loaded] Launcher Disabler (Microsoft Corporation - installed 2020-10-08)
    Modern Login Item
    /Applications/OneDrive.app/Contents/Library/LoginItems/Launcher Disabler.app

  [Not Loaded] OneDrive Launcher (Microsoft Corporation - installed 2020-10-08)
    Modern Login Item
    /Applications/OneDrive.app/Contents/Library/LoginItems/OneDrive Launcher.app

  [Not Loaded] StartUpHelper (Spotify - installed 2020-02-15)
    Modern Login Item
    /Applications/Spotify.app/Contents/Library/LoginItems/StartUpHelper.app

  [Not Loaded] coconutBattery Helper (Christoph Sinai - installed 2020-10-08)
    Modern Login Item
    /Applications/coconutBattery.app/Contents/Library/LoginItems/coconutBattery Helper.app

  [Not Loaded] PhotoStreamAgent (App Store - installed 2015-06-25)
    Modern Login Item
    /Applications/iPhoto.app/Contents/Library/LoginItems/PhotoStreamAgent.app

Internet Plug-ins:
  OfficeLiveBrowserPlugin: 12.3.0 (? - installed 2011-06-24)
  Flip4Mac WMV Plugin: 3.0.0.126   (? - installed 2013-01-14)
  VLC Plugin: 2.2.4 (? - installed 2016-06-02)
  AdobeAAMDetect: 3.0.0.0 (Adobe Inc. - installed 2020-10-08)
  AdobePDFViewerNPAPI: 17.012.20098 (Adobe Systems, Inc. - installed 2020-12-10)
  Silverlight: 5.1.41212.0 (? - installed 2016-02-17)
  WacomTabletPlugin: WacomTabletPlugin 2.1.0.6 (? - installed 2014-12-22)
  iPhotoPhotocast: 7.0 (Apple - installed 2015-06-25)
  SharePointBrowserPlugin: 14.7.7 (? - installed 2018-05-12)
  AdobePDFViewer: 20.013.20074 (Adobe Systems, Inc. - installed 2020-12-10)
  CANONiMAGEGATEWAYDL: 3.0.0.2 (? - installed 2009-03-06)
  EPPEX Plugin: 10.0 (? - installed 2018-09-20)
  DirectorShockwave: 12.2.4r194 (? - installed 2016-02-23)

Safari Extensions:
  "Open In" button for Internet Explorer (Parallels International GmbH - installed 2020-10-03)

3rd Party Preference Panes:
  Flip4Mac WMV (? - installed 2012-09-15)
  ParagonNTFS (Paragon Software GmbH - installed 2020-03-17)
  Perian (? - installed 2011-07-23)
  WacomTablet (Wacom Technology Corp. - installed 2014-12-22)

Backup:
  Skip System Files: No
  Mobile backups: No
  Auto backup: Yes
  Destinations: 
    T*********e [Network] (Last used)
      Total size: 2.00 TB
      Total number of backups: 23
      Oldest backup: 2020-12-23 22:05:54
      Last backup: 2021-01-10 17:42:05
  10 local snapshots
  Oldest local snapshot: 2021-01-09 18:15:20
  Last local snapshot: 2021-01-10 17:32:36

  3rd party backup: Carbon Copy Cloner

Performance:
  System Load: 1.24 (1 min ago) 1.22 (5 min ago) 1.33 (15 min ago)
  Nominal I/O speed: 0.17 MB/s
  File system: 18.23 seconds
  Write speed: 3071 MB/s
  Read speed: 3065 MB/s

CPU Usage Snapshot:
  Type Overall
  System: 1 %
  User: 2 %
  Idle: 97 %

Top Processes Snapshot by CPU:
  Process (count) CPU (Source - Location)
  Other processes 28.37 % (?)
  EtreCheck 22.49 % (App Store)
  AMPDevicesAgent 1.88 % (Apple)
  trustd 0.51 % (Apple)
  Acronis Monitor 0.31 % (Acronis International GmbH)

Top Processes Snapshot by Memory:
  Process (count) RAM usage (Source - Location)
  EtreCheck 613 MB (App Store)
  Dropbox 302 MB (Dropbox, Inc.)
  Finder 234 MB (Apple)
  Dock 231 MB (Apple)
  Mail 205 MB (Apple)

Top Processes Snapshot by Network Use:
  Process (count) Input / Output (Source - Location)
  Other processes 5 MB / 1 MB (?)
  Mail 33 KB / 3 MB (Apple)
  Dropbox 178 KB / 191 KB (Dropbox, Inc.)
  AMPDevicesAgent 6 KB / 10 KB (Apple)
  AMPDeviceDiscoveryAgent 5 KB / 7 KB (Apple)

Virtual Memory Information:
  Physical RAM: 16 GB

  Free RAM: 2.32 GB
  Used RAM: 8.09 GB
  Cached files: 5.59 GB

  Available RAM: 7.91 GB
  Swap Used: 0 B

Software Installs (past 30 days):
  Install Date Name (Version)
  2020-12-15 Microsoft AutoUpdate (4.30.20121301)
  2020-12-15 Microsoft PowerPoint (16.44.20121301)
  2020-12-15 Microsoft Excel (16.44.20121301)
  2020-12-15 Microsoft OneNote (16.44.20121301)
  2020-12-15 Microsoft Outlook (16.44.20121301)
  2020-12-15 Microsoft Word (16.44.20121301)
  2020-12-16 iMovie (10.2.2)
  2020-12-16 Mobilgerät (1.0.0.0)
  2020-12-16 Safari (14.0.2)
  2020-12-18 XProtectPlistConfigData (2137)
  2021-01-08 Sicherheitsupdate 2020-001 (10.15.7)
  2021-01-08 MRTConfigData (1.72)
  2021-01-08 Update für EPSON-Druckersoftware (3.3)
  2021-01-10 Malwarebytes for Mac Deinstallationsprogramm (1.0)
  2021-01-10 EtreCheck (5.6.5)

Clean up:
  ~/Library/LaunchAgents/com.adobe.ARM.***.plist
    /Applications/Adobe Reader.app/Contents/MacOS/Updater/Adobe Reader Updater Helper.app/Contents/MacOS/Adobe Reader Updater Helper
    Executable not found

Diagnostics Information (past 7-30 days):
  2021-01-10 13:12:04 backupd High CPU Use (12 times)
    Executable: /System/Library/CoreServices/backupd.bundle/Contents/Resources/backupd

  2021-01-10 11:36:54 Adobe Elements 12 Organizer.app Crash (6 times)
    Executable: /Applications/Adobe Elements 12 Organizer.app

  2021-01-10 11:34:16 lsd Crash
    Executable: /usr/libexec/lsd
    Details:
      dyld3 mode
      savedDB WAS seeded, newDB WAS NOT seeded. Failed attempting to remap d
      atabase, abort to trigger seeding. Error: Error Domain=NSOSStatusError
      Domain Code=-9496 "kCSStoreBadDataErr" UserInfo={Line=201, Checksum=2,
       ZeroedRanges=(
      "0x8D4000-0x8D7FFF (16 KB)",
      "0x8DA000-0x8DBFFF (8 KB)",
      "0x8E2000-0x8E5FFF (16 KB)",
      "0x8EC000-0x8EDFFF (8 KB)",
      "0x902000-0x911FFF (66 KB)"
      ), NSDebugDescription=kCSStoreBadDataErr, NSURL=file:///var/folders/zz
      /zyxvpxvq6csfxvn_n0000000000000/0/com.apple.LaunchServices.dv/com.appl
      e.LaunchServices-1082-v2.csstore}
      abort() called

  2021-01-10 11:33:17 Acronis True Image.app Crash (5 times)
    Executable: /Applications/Acronis True Image.app
    Details:
      dyld: in dlopen_preflight()
      abort() called
      terminating

  2021-01-09 19:20:58 ath Crash
    Executable: /Library/Apple/*/AirTrafficHost.framework/ath
    Details:
      dyld3 mode

  2021-01-09 09:03:18 syspolicyd High CPU Use
    Executable: /usr/libexec/syspolicyd

  2021-01-08 18:14:49 Finder.app High CPU Use
    Executable: /System/Library/CoreServices/Finder.app

  2021-01-08 18:08:19 WacomTabletDriver.app Crash
    Executable: /Library/Application Support/Tablet/WacomTabletDriver.app


End of report